Security posture waste check
Resource without Backup Coverage
resource_without_backup_coverage
What it finds
Resource without Backup Coverage: one of the Security posture checks in the security & compliance group. Checks in this group look for: configuration gaps on resources you pay for: missing encryption, missing deletion protection, public exposure, uncovered backups.
Why it costs money
These are posture findings first. Some also carry a cost, such as a resource nobody backs up or protects properly, and the report labels which is which.
How it is detected
Critical resource not covered by any AWS Backup plan
Detection confidence: MEDIUM. This is the criterion from our public docs. It runs in a local scan with your own read-only credentials.
AWS's own tools
AWS flags this too, under "Amazon RDS Continuous Backup Not Enabled; Amazon DynamoDB Point-in-time Recovery".
Checked against the AWS documentation.
Run it yourself
Nothing leaves your machine. The local scan has no telemetry.